We have received reports about two buffer overflows in the superpackage which was distributed as part of Debian GNU/Linux. Firstly,for per-user .supertab files super didn't check for a buffer overflowwhen creating the path to the user's .supertab file. Secondly anotherbuffer overflow did allow ordinary users to overflow super by creatinga nasty personal .supertab file.